Privacy Policy
Autosify Studio is committed to protecting your personal data under the EU General Data Protection Regulation (GDPR). This policy explains what we collect, why, and your rights.
1. Data controller
Autosify Studio is the data controller for personal data processed through this service. Contact: privacy@autosify.studio
2. What data we collect
Photos you upload (processed in memory or temporarily stored for 24 hours, then deleted). Contact details you provide on the lead form (name, phone, city, district, planned timing). Anonymous usage data (which surface chosen, which products viewed) for product improvement.
3. Legal basis (Art. 6 GDPR)
Consent (you upload your photo, you fill the contact form). Legitimate interest (anonymous usage statistics, render quality improvement). We do not rely on automated decisions producing legal effects on you.
4. How long we keep data
Uploaded photos: 24 hours. Lead contact details: 12 months after the last interaction or until you request deletion. Aggregated, anonymous statistics: indefinitely.
5. Who we share with
Vendors only when you explicitly submit a lead and confirm you want them contacted. AI rendering provider (fal.ai) processes your photo to produce the visualization; their EU sub-processor agreement applies. We do not sell data, do not run ad networks, do not embed third-party trackers.
6. International transfers
Where data is transferred outside the EU/EEA (e.g., to fal.ai), we rely on EU Standard Contractual Clauses and additional safeguards as required by Schrems II.
7. Your rights
Access (Art. 15), Rectification (Art. 16), Erasure / Right to be forgotten (Art. 17), Restriction (Art. 18), Portability (Art. 20), Objection (Art. 21). To exercise, email privacy@autosify.studio. Response within 30 days.
9. Supervisory authority
You have the right to lodge a complaint with your national data protection authority (e.g., CNIL in France, BfDI in Germany, ICO in the UK, KVKK in Turkey).
10. Changes to this policy
Material changes will be announced on this page and via email to active users at least 30 days before taking effect.